[fix] Fixed scripting issues due to improperly encoded kibana payload.

elastic · Jun 28, 2016 · 08a6f40 · 08a6f40
1 parent 1248b2f
commit 08a6f40
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/src/ui/views/chrome.jade b/src/ui/views/chrome.jade
@@ -1,5 +1,11 @@
-- var j = function (o) { return JSON.stringify(o); }
-- var appName = 'kibana';
+-
+  var appName = 'kibana';
+
+  function encoded (data) {
+    var scriptend = /\<\s*\/\s*script\s*>/ig;
+    var concatend = '</" + "script>';
+    return JSON.stringify(data).replace(scriptend, concatend);
+  }
 
 block vars
 
@@ -12,5 +18,5 @@ html(lang='en')
     title Kibana
     block head
   body(kbn-chrome, id='#{appName}-body')
-    script window.__KBN__ = !{j(kibanaPayload)};
+    script window.__KBN__ = !{encoded(kibanaPayload)};
     block content